Exetools  

Go Back   Exetools > General > Community Tools
Reload this Page Improve .NET Deobfuscator
Register Forum Rules FAQ Calendar

Notices

Reply
Page 3 of 4 12 3 4
 
Thread Tools Display Modes
  #31  
Old 09-29-2013, 05:13
XorRanger XorRanger is offline
Family
  
Join Date: May 2013
Location: Nigeria
Posts: 82
Rept. Given: 139
Rept. Rcvd 86 Times in 27 Posts
Thanks Given: 23
Thanks Rcvd at 25 Times in 11 Posts
XorRanger Reputation: 86
Nice Update LordCoder.
Could You add Support For obfusasm.

http://www.devextras.com/obfuscation/

Thanks.
__________________
We are on a quest to understand the inexplicable,break the unbreakable.
This is our path,our eternal journey.
Reply With Quote
The Following User Gave Reputation+1 to XorRanger For This Useful Post:
LordCoder (09-29-2013)
  #32  
Old 11-01-2013, 17:47
LordCoder LordCoder is offline
TEAM REiS
  
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
New version 0.1.7 with:
Quote:
  • Added RPX
  • Added option of context menu to the Explorer
  • Redesign of the main window
  • Added drag n' drop function
  • Added update checker
The DNGuard will be really difficult for me hope someone can help me on it. As I saw, it has a section called "hvm" which is encrypted. The dll is called as a .exe with an entry point on the DllImport of the .NET application. What I need to get is all IL code from the memory and save it as exe. My problem is how to get the code from the memory? The big problem for me is the low IDA/OllyDbg knowledge so it's really difficult for me to do so.

For the .NetObf is almost done and also TnTLicensing is also almost supported but not added until.


Download it here: https://sourceforge.net/projects/improvenetdeobf/

Thanks for support.
__________________
TEAM REiS - Reverse Engineering iN Software
Reply With Quote
The Following 9 Users Gave Reputation+1 to LordCoder For This Useful Post:
Av0id (11-05-2013), besoeso (11-01-2013), Dreamer (11-01-2013), giv (11-02-2013), HooK (11-14-2013), kjms (11-01-2013), nikkapedd (11-13-2013), sendersu (11-18-2013), XorRanger (11-01-2013)
  #33  
Old 11-14-2013, 00:26
s eriari8
 
Posts: n/a
thanks uuuuuuuuuuuu
Reply With Quote
  #34  
Old 12-01-2013, 00:05
LordCoder LordCoder is offline
TEAM REiS
  
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
New update to v0.1.8
New version v0.1.8 with:
Quote:
  • OrangeHeap is now supported
  • NetObf-Protector is now supported (requested by sendersu)
  • Fixed Phoenix Protector String Decryption.
  • Fixed ExePack.NET dlls unpacking
  • DotBundle is supported (as a packer)
  • Added option to change the colours of the window
  • Various Obfuscators Detector and Deobfuscator
  • DotWall Obfuscator string decryption maximum supported
Download Binary: Download it Here

Source Code:
Download Source

If you want to request new obfuscators I will try to support them.
__________________
TEAM REiS - Reverse Engineering iN Software
Reply With Quote
The Following 9 Users Gave Reputation+1 to LordCoder For This Useful Post:
giv (12-01-2013), kjms (12-01-2013), nikkapedd (12-02-2013), quygia128 (12-01-2013), TQN (12-01-2013), uranus64 (12-29-2013), wilson bibe (12-01-2013), zeuscane (12-01-2013)
  #35  
Old 12-29-2013, 04:25
LordCoder LordCoder is offline
TEAM REiS
  
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
New update to v0.1.9!

What's new/fixed?

Quote:
  • Obfuscar is now supported (requested by Av0id)
  • Added MPRESS
  • Castle Crypter v0.1 is now supported
  • Fixed DotBundle unpacking (password was not correct).
  • Deobfuscated assembly should run correctly
  • Fixed small bugs in renaming
  • Fixed some bugs on RPX
Download Binary: Click here
Download Source Code: Click here

Thanks
__________________
TEAM REiS - Reverse Engineering iN Software
Reply With Quote
The Following 11 Users Gave Reputation+1 to LordCoder For This Useful Post:
ahmadmansoor (12-29-2013), Dreamer (12-29-2013), Git (12-29-2013), papi (12-29-2013), quygia128 (12-29-2013), sendersu (12-30-2013), TechLord (12-29-2013), TQN (12-29-2013), uranus64 (12-29-2013), wilson bibe (12-29-2013), XorRanger (12-29-2013)
  #36  
Old 12-29-2013, 18:39
Git's Avatar
Git Git is offline
Old Git
  
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
Downloaded the binary twice and it seems to be a corrupt archive.

Git
Reply With Quote
  #37  
Old 12-29-2013, 19:19
XorRanger XorRanger is offline
Family
  
Join Date: May 2013
Location: Nigeria
Posts: 82
Rept. Given: 139
Rept. Rcvd 86 Times in 27 Posts
Thanks Given: 23
Thanks Rcvd at 25 Times in 11 Posts
XorRanger Reputation: 86
Nice to see the way this Project is going. Good Job LordCoder. Still Waiting For obfusasm Support.
http://www.devextras.com/
obfuscation/
__________________
We are on a quest to understand the inexplicable,break the unbreakable.
This is our path,our eternal journey.
Reply With Quote
  #38  
Old 12-29-2013, 22:25
LordCoder LordCoder is offline
TEAM REiS
  
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
@Git Try again downloading maybe it was because of the WinRAR v5. I uploaded it again.
@XorRanger I'm still developing it please be patient. You can go trying this deobfuscator for Obfusasm: http://netdeob0.codeplex.com/
__________________
TEAM REiS - Reverse Engineering iN Software
Reply With Quote
The Following 3 Users Gave Reputation+1 to LordCoder For This Useful Post:
besoeso (01-01-2014), Dreamer (12-30-2013), XorRanger (12-29-2013)
  #39  
Old 03-02-2014, 06:24
serseri_1453 serseri_1453 is offline
Friend
  
Join Date: Mar 2014
Location: Turkey
Posts: 20
Rept. Given: 40
Rept. Rcvd 13 Times in 4 Posts
Thanks Given: 76
Thanks Rcvd at 3 Times in 3 Posts
serseri_1453 Reputation: 13
Wink
Add Confuser 1.9

Thanks LordCoder
Reply With Quote
  #40  
Old 09-14-2014, 23:41
sendersu sendersu is offline
VIP
  
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Hi Author
some kind of issues with 1.9 on win7 x64
on changing settings and trying to save it.
http://prntscr.com/4mrgoj
Reply With Quote
  #41  
Old 09-14-2014, 23:44
SubzEro
 
Posts: n/a
he leaved that project
Reply With Quote
The Following User Gave Reputation+1 to For This Useful Post:
sendersu (09-15-2014)
  #42  
Old 04-26-2025, 01:11
val2032 val2032 is offline
Friend
  
Join Date: Apr 2010
Posts: 62
Rept. Given: 28
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 130
Thanks Rcvd at 43 Times in 24 Posts
val2032 Reputation: 2
Hi!

Is there any solution to deobfuscate Obfuscar 1.0?
Reply With Quote
  #43  
Old 04-26-2025, 01:57
sendersu sendersu is offline
VIP
  
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
https://github.com/NotPrab/.NET-Deobfuscator?tab=readme-ov-file#obfuscar
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
val2032 (04-26-2025)
  #44  
Old 04-26-2025, 04:01
val2032 val2032 is offline
Friend
  
Join Date: Apr 2010
Posts: 62
Rept. Given: 28
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 130
Thanks Rcvd at 43 Times in 24 Posts
val2032 Reputation: 2
Quote:
Originally Posted by sendersu View Post
https://github.com/NotPrab/.NET-Deobfuscator?tab=readme-ov-file#obfuscar
Solved with https://github.com/cod3nym/Deobfuscar
Reply With Quote
  #45  
Old 04-26-2025, 17:09
CodeCracker CodeCracker is offline
VIP
  
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 661 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,820 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
Can someone share v0.1.9 ???
since link are down!
Reply With Quote
Reply
Page 3 of 4 12 3 4

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
de4dot - Deobfuscator for .NET mdj Community Tools 193 03-04-2023 15:32
How to improve the FTP (2 simple things) Rhodium General Discussion 4 04-20-2004 16:13


All times are GMT +8. The time now is 02:11.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )